Kurz gesagt
- CVE-2020-24554 ist eine Schwachstelle (HOCH (CVSS 7.5)) in com.liferay.portal:release.portal.bom, liferay portal (liferay).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.8%, höher als bei 78.0% aller Schwachstellen.
- Abhilfe: auf 7.3.3 oder neuer aktualisieren.
Description
The redirect module in Liferay Portal before 7.3.3 does not limit the number of URLs resulting in a 404 error that is recorded, which allows remote attackers to perform a denial of service attack by making repeated requests for pages that do not exist.
NVD description
The redirect module in Liferay Portal before 7.3.3 does not limit the number of URLs resulting in a 404 error that is recorded, which allows remote attackers to perform a denial of service attack by making repeated requests for pages that do not exist.
Weitere Schwachstellen in com.liferay.portal:release.portal.bom
Alle anzeigen →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free